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^oewfiS^ IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

PATENT APPLICATION 



Applicant(s): Yair Bartal 

Alain Jules Mayer 

Avishai Wool 
Case: 2-5-7 
Serial No.: 09/240,934 
Filing Date: January 29, 1999 
Group: 2131 
Examiner: Christopher A. Revak 

Title: Method and Apparatus for Managing a Firewall 



AMENDMENT TRANSMITTAL 



I hereby certify that this paper is being deposited on this date 
with the U.S. Postal Service as first class mail addressed to the 
Assistant Commissioner for Patents, Washington, D.C. 20231 

Signaturt ^fLrJL, ^L^y^ Date: November 21, 2002 



Assistant Commissioner for Patents 
Washington, D.C. 20231 



Sir: 



Submitted herewith is an Amendment After Final Rejection relating to the above-identified 
patent application. There is no additional claim fee due in connection with the amendment. In the 
event of non-payment or improper payment of a required fee, the Commissioner is authorized to 
charge or to credit Deposit Account No. 50-0762 as required to correct the error. A duplicate copy 
of this letter is enclosed. 



Respectfully, 

^uuU /U . A*ws — - 

Date: November 21, 2002 Kevin M. Mason 

Attorney for Applicant(s) 
Reg. No. 36,597 
Ryan, Mason & Lewis, LLP 
1300 Post Road, Suite 205 
Fairfield, CT 06430 
(203) 255-6560 
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Method and Apparatus for Managing a Firewall 



AMENDMENT AFTER FINAL REJECTION 
UNDER 37 CFRS1.116 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

Box AF 
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Sir: 

In response to the final outstanding Office Action, dated September 5, 2002, please 
amend the above-identified patent application as follows: 
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IN THE CLAIMS : 

Please amend the claims as indicated below. A version of the claims which has been 
marked to show all changes is included as an Appendix. 

1 . (Twice Amended) A method for generating a configuration file for at least one firewall 

in a network, said network including a plurality of hosts, said method comprising the steps of: 

receiving a definition for a plurality of roles that specify the ability of a host to send and 
receive packets, wherein each of said roles may be assigned to said hosts independently of a topology of 
said network, such that said hosts inherit said definitions associated with an assigned role; 

receiving an assignment of said roles to said hosts in said network; and 
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